AIML Generate images and videos
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for AIMLAPI image and video generation, with expected cautions around using an API key and sending prompts or input media to an external provider.
This appears safe to install if you intend to generate media with AIMLAPI. Before using it, confirm you are comfortable sharing prompts and any input images with AIMLAPI, and use a dedicated API key with appropriate account limits.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Generated media requests may use the user's AIMLAPI quota, billing, or account permissions.
The script uses an AIMLAPI bearer token from the environment or an optional file. This is expected for the service integration, but it gives the skill access to the user's AIMLAPI account.
api_key = os.getenv("AIMLAPI_API_KEY") ... key = pathlib.Path(args.apikey_file).read_text(encoding="utf-8").strip() ... "Authorization": f"Bearer {api_key}"Use a dedicated AIMLAPI key with the minimum needed permissions, keep it out of prompts/logs, and only use --apikey-file with a file that contains the intended AIMLAPI key.
Text prompts and any input images may be processed by an external provider.
Prompts and optional image inputs are sent to AIMLAPI. Local image paths are read and encoded before being included in the remote generation request.
DEFAULT_BASE_URL = "https://api.aimlapi.com/v1" ... "prompt": args.prompt ... if args.image_url: img_data = get_base64(args.image_url)
Avoid including secrets, private documents, or sensitive personal data in prompts or input media unless the AIMLAPI account and provider terms are appropriate for that data.
